CVE-2015-3934 | BDVDB-2026-93204 Detail

Description#

Multiple SQL injection vulnerabilities in Fiyo CMS 2.0_1.9.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to apps/app_article/controller/rating.php or (2) user parameter to user/login.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.com/files/132479/Fiyo-CMS-2.0_1.9.1-SQL-Injection.html

Exploit#

No public exploit known

History#

Version 12017-11-21Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.